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ABSTRACT 


Galois switching functions (GSFs) can be considered as 
functions in a vector space with domain GF(2™) and range 
GFCz”). Binary switching functions are a special case of the GSFs. 
These functions are amenable to a compact and well— structured 
polynomial representation on an appropriate extended Galois field. 
This systematic algebraic representation in the form of a 
polynomial holds for both binary as well as nonbinary switching 
functions. In this thesis, we have presented an approach to the 
realization of GSFs. The realization has been done in two stages. 
In the first stage, we have determined the coefficients of 
polynomial representation of binary switching functions in 
software. The second stage consists of polynomial evaluation over 
a finite field in hardware. 

The polynomial representation is obtained for both 
1-D and 2-D cases. A truth table of upto a maximum of 15 input and 
output Boolean variables has been represented in the form of a 
polynomial of one variable in an extended Galois field for the 1-D 
case. The representation gives the corresponding coefficients to 
the truth table in an appropriate extended Galois field. For 
general mapping with the domain € GF(2*”) and range € GFCZ”), 
appropriate zero padding reduces the field size which improves the 
speed of computation. For 2-D GSFs, 2-D images are represented in 
the form of polynomials of 2-variable in an extended Galois field. 



Various alfiorithms have been explained with the help of flow 

charts. The software package is modular and user interactive. 

Hardware to obtain the original mapping has been 

developed. This consists of polynomial evaluation based on 

N 

Horner's rule over GF(2 ) with N in the range of 2 to 8. For this, 

N 

we have developed a finite field multiplier over GF(2 ) for any N 
in the above mentioned range using standard basis. 



CHAPTER 1 


INTRODUCTION 

Galois switching functions (GSFs) are essentially 

signals defined on a finite index set with the structure of a 

finite field, say GF(2 ), and taking their values from a finite 

field, say GFC2*'’). The GSFs may be interpreted as members of a 

k ti 

vector space with domain GFC2 ) and range GF(2 ). These are a 
generalization of binary switching functions in that the input and 
output variables can assume values over any finite field. 

Galois switching functions can be very useful in 
any digital information processing situation such as error control 
coding, cryptography, and digital image processing. 

Digital information processing is essentially 
centered around various suitable representations of a set of n 
Boolean functions of m variables. These representations should be 
simple and systematic for information processing purposes. If the 
Boolean functions are represented in a simple algebraic form, 
further processing will involve only algebraic computations. 
Several authors, as referred to the next section, have contributed 
towards formulation of algebraic representations of Boolean 
functions. 

Representation of signals for digital information 
processing purposes calls for an alternative description of the 
following set of Boolean functions 





where j = 0, 1, 2 n-1 and € { 0 , 1 >. Since 

Galois or finite field is the natural extension of the Boolean 
field, the concept of finite fields can be utilized for 
representing Boolean functions in polynomial form. Polynomial 
representation in an extended Galois field realizes a Boolean 
function mapping. In applications such as error control coding and 
cryptography. Boolean functions can be realized systematically in 
polynomial form. Application of Galois switching functions also 
plays an Important role in case of nonbinary switching functions. 

In this thesis, ve have considered the 

representation of the Boolean functions in polynomial form over a 
Galois field. As the Boolean functions are represented by a 
polynomial, further processing will be in the form of algebraic 
operations on the polynomial. 

Ue have developed the software to realize 
polynomial coefficients representing a given Galois switching 
functions for both 1-D and 2-D cases. For a 1-D Galois switching 
function, we have represented in polynomial form a truth table 
for upto a maximum of 15 Boolean functions, each one being a 
function of upto 15 variables. Evaluation of the coefficients 
involves DFT computation over finite field, for which FFT 
algorithms over finite fields have been implemented. For 
realization of 2~D Galois switching functions, we have 
implemented 2-variable polynomial representations of images. Grey 



levels of 2"D images have been expressed as field elements in 
GF(2") and the image data has been realised in a polynomial form 
of 2 variables in an extended Galois field. Evaluation of 
polynomials over Galois fields is an integral part of realization 
of the original mapping. For this we have presented an approach to 
design a hardware for evaluation of a single . variable polynomial 
in GF(2’^), for N lying between 2 and 8. Polynomial evaluation is 
based on Horner’s rule. 


• ’1 Histor i cal background : 

Several authors have presented their discussions 
on switching functions based on a Galois field. Ninomiya C9I] was 
the person who first treated the realization of switching 
functions in a Galois field. Bartee, Schneider C13, 

Benjauthrit C23 and Reed L31 introduced the idea of use of 
extension fields. Monger L&l presented the viewpoint of the 
abstract Fourier transform. Pradhan and Patel C101 proposed the 
idea of minimization of switching functions based on the 
Reed“Muller code which is basically a multivariable polynomial in 
a Galois field. Recently, Takahashi CIIG proposed a method to 
reduce n functions of m variables on GF(2) to one polynomial of 
one variable in the extended Galois field GF(2 ). He also pointed 
out some remarkable properties of such polynomials based on 


Frobenius transforms. 



1.2 Organization of the thes i s s 

In this section we give a brief account of the 
remaining chapters in the thesis. 

Chapter 2 introduces the relevant algebraic 
background concerning finite fields. An outline of some basic 
algorithms for finite field fast Fourier transform (FFT) is also 
given here. 

In Chapter 3, we have presented the theory of 
polynomial representation of switching functions in extended 
Galois fields. Related theorems have been stated. 

Chapter 4 gives a software package for determining 
polynomial coefficients representing a given Galois switching 
function. Flow charts of various algorithms implemented in the 
software have been given. Determination of polynomial coefficients 
has been done for the both 1~D and 2-D Galois switching functions. 
For 1~D Galois switching functions, we have implemented the 
polynomial representation of truth tables of a maximum of upto 15 
Boolean functions each of 15 variables. As an application of such 
1~D polynomial representations, we have implemented the 
substitution mapping realization of upto 8 objects. For 2-D Galois 
switching functions, we have determined the coefficients for the 
polynomial representation of 2-D images. 

Chapter 5 gives details of the hardware 
impflementation. The hardware implements the polynomial evaluation 
based on Horner's rule. We have presented a multiplier design to 
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N 

realize multiplications over a Galois field GF(2 ), where N is 
the range of 2 to 8. Detailed circuit and timing diagrams 
given. 

Results and future scope have been discussed 
Chapter 6 as the concluding part of the thesis. 


in 

are 

in 



CHAPTER 2 


ALGEBRAIC BACKGROUND 

This chapter includes relevant details of Galois 
fields. Fast fourier transforio over finite field has also been 

discussed . 

2.1 Finite fields and extensions : 

In this section we have given the definitions of 
finite field, extension of finite field and other necessary terms. 

2.1.1 Finite fields : 

A field is a set containing atleast two elements 
that has two operations defined on it - addition and 
multiplication - such that the following axioms are satisfied: 

a) The set is an abelian group under addition (+). 

b) The set is closed under multiplication (*), and the set of 
nonzero elements is an abelian group under multiplication. 

c) The distribution law 

(a + b)c = ac + be holds for all a,b,c in the set. 

Some of the examples of fields are the set of real 

numbers, the set of complex numbers, the set of rational numbers. 
The above fields have an infinite number of elements known as 

infinite field. A finite field is one which contains a finite 

number of elements. A finite field containing q elements is 
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known as Galois field, denoted by GF(q). Every field must have an 
element zero and an element one. The field containing only these 
two elements is known as GF(2). The addition and multiplication 
tables are given below for GF(2): 


+ 10 1 

0 I 0 1 

111 0 


.10 1 
— t 

0 I 0 0 

1 I 0 1 


For a finite field GFfq), q must be either a prime number, or some 

n 

integral power of a prime number, i.e.,q=p, n=l, 2, 3,.. 

and p is a prime number. 


2.1.2 Field extension : 

Let F be a field. A subset K of F that is itself a 
field under the operations of F is called a subfield of F. In 
this context, F is called an extension field of K. If K = F, we 
say that K is a proper subfield of F. As for example, the field of 
rationale is a subfield of the field of reals, which in turn is a 
subfield of the complex field. There may be only a finite number 
of integers in the field, in which case the number of integers is 
called the characteristic of the field. The characteristic of the 
field is always a prime number. As for example, characteristic of 
GFC3) is 3, GF(2) is 2. Both the real and complex fields have 
characteristic infinity. 



2 . 2 Polynomial rings : 


For each field F, there is a ring F[x] called the 
ring of polynomials over F. Mathematically, a polynomial over a 

field is: f(x) = ^ "*■ ^1* ^0* 

n 

= E fix^ 
i=0 

where the coefficients fg* fi. £ 2 * ^n el®n>ents of the 

field. The zero polynomial is f(x) = 0. A monic polynomial is 
a polynomial whose coefficient fjj with the largest index is equal 
to 1. The sum of two polynomials in F[x] is another polynomial in 
F[x] defined by 

n 

fCx) + g(x) = E Cfi + gi)x^- 
i=0 

The degree of the sum is not greater than the larger of these two 

degrees. The product of two polynomials in F[x] is another 

polynomial in F[x3 defined by 

f(x)g(x) = E ( E fjgi-j )x'^ . 
i=0 j=0 

The degree of product is equal to the sum of the degrees of the 
two polynomials. A nonzero polynomial pCx) which is only divisible 
by pCx) or 3, where 3 is an arbitrary field element, is called an 
irreducible polynomial. A monic irreducible polynomial is called a 


prime polynomial. 



2.3 Representation of field el einents by power of primitive 
element : 

An element of a field GFCq) is said to be a 
primitive element which can generate all the other nonzero field 
elements. The order of a field element is defined as the least 
integer, to which the element should be raised to get the unit 
element of the field. The order of a primitive element of GF(q) is 
Cq-l),i.e., 3** = 1, where (3 is the primitive element of GF(q). 

Let us present an example for the representation of field elements 

3 

in GFC2 ) as the power of primitive element |3 . 


3 

Example 2.3.1: Let p(x) = x + x + 1 be an irreducible polynomial 

3 

over GFC2) and p be the primitive element in GFC2 ). 

3 

Now, P + p + 1 = 0. Here in below both the n-tuple i.e cartesian 

3 

form and the polynomial form are given for GFC2 ). Polar form is 
the representation of any field element in the power of primitive 
element . 

n-tupl e polynomial representation polar form 


0 0 0 
0 0 1 
0 10 
10 0 
oil 
1 1 0 
1 11 


0 

1 



X 


X 


2 


1 + X 

^ 2 
X + X 

1 + X + x^ 




10 1 



10 


2 . 4 Vector spaces : 

For a given field F, the n-tuple of field elements 

(fQ, fl, , ^n-l) called a vector of length n over the 

field F. The set of all such vectors of length n together with two 
operations called vector addition and scaler multiplication is 
called a vector space over the field F. Scaler multiplication is 
an operation that multiplies a vector by a field element. 

Symbolically, 0(fo» ^1- ^2 fn-l) = CI3£o- , Pf 2 » • • • • 3 ^n-l) 

where, 3 is a field element and (fg. £i. £2'---'£n-l) 

components of a vector f. 

Vector addition is an operation that adds two vectors g and h 
according to the following definition: 

SQ’ Si?*-- - ?Sn—l^ ^ ^0» ^1?---- - ? ^n~ 1 ^ 

= C go + tiQ, gi + h^, Sn-1 ^n-1 )• 

For a vector space V, the operations must satisfy the 

following axioms: 

a) V is an abelian group under the vector addition. 

b) For any vectors VI, V2 and any scaler 3 

3( VI + V2 ) = 3V1 + 3V2. 

For any vector V and any scalers 3 and n 
C 3 + u ) V = 3V nV. 

These are known as distributive laws. 

c) For any vector V and any scalers 3 and Tt 

( 3tr )V = 3C ttV ). 

This is known as the associative law. 



2 . 5 Standard and normal basis ; 


For a vector space we can construct basis 
consisting of linearly independent vectors. Ue can then represent 
any vector in the vector space in terms of the basis. The vector 
space for GFC2*^) can be represented by n linearly independent 
vectors which constitute a basis. In Galois field there are 
basically two types of representation. One is the standard basis 
and the other is normal basis. 

a) Standard basis : If a is a primitive element in GFC2^), then the 

2 3 

set { l,a,a,a ,a ) forms a basis vector in the 

vector space formed by GF(2*^). This is known as standard basis. Ue 
have used this representation throughout our thesis work. 

b) Normal basis : If a is a primitive element in GFC2”), we can 

ic 

find a 3 such that 3 = a where k and n are the positive integers. i 
2 ° 2 ^ 2 ^ 

The set {3 ,3 »|3 , .3 } constitutes the basis of! 

the vector space formed by GF(2*^) known as normal basis. For ai 
given field GF(2*^), we can have many normal bases each having thei 
same number of elements. The only difference is in the relation) 
between the polar and the corresponding cartesian representation. 

2-6 Fast Fourier transform over f init e field ; 

One of the important computations in digital signal 
processing is discrete Fourier transform. There is also a Fourier 
transform in a finite field. Discrete Fourier transform in a 
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finite field F is defined as; 


ik 

Vk = E w vj 
i = 0 


( 2 . 1 ) 


k = 0, 1, 2,....,n-l 


where, w is an nth root of unity in F and v and V are the vectors 

2 

of length n in F. The above equation requires in the order of n 

2 

multiplications and n additions. Using FFT algorithms we need in 
the order of nlogn operations. A Fourier transform of block length 
n exists in F if there is an nth root of unity in F. Say Vj[ 
€ GFCq) and Vj € GFCq^), then the nth root of unity in F will 
exist if n divides (q”* - 1). 

A 2-D discrete Fourier transform in a field F is defined as; 

nl-1 n2-l 


V„ „ = E 
iti , n 

i=0 j=0 


„ im in 
E W TT"^ V 


i » J 


where m = 0, 1 nl-1 and n = 0, 1 n2-l. 

This transform exists whenever the field F contains an element w 
of order nl and an element ti of order n2 . If such elements do not 
exist, then the transform is not possible. There are many 
algorithms [4] available on fast Fourier transform like Cooley- 
Tukey, Good Thomas, Rader prime etc. Ue shall discuss in breif 
those algorithms which have been implemented in the software. 
Proofs of the algorithms [4] have not given here. 
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2.6.1 Cool ey-Tukey algorithm ; 

The Fourier transform of a vector v is given by the 
equation (2.1). If the block length n is composite say n = nl.n2, 
then the summarised structure of Cooley-Tukey algorithm [4] is 
given below. 


n = nl.n2 
i = il + nl.i2 
k = n2.kl + k2 


^ il kl il k2*^^~^ i2 k2 

Then Vki,k2 = ^ E „i2.kZ 

il=0 i2=0 


where 


Number 


11 = 0, 1 nl-1 , 

12 = 0, 1 n2-l, 

kl = 0, 1 , nl-1 , 

k2 = 0 , 1 n2-l , 

n . nl . n2 „ 

w = 1 , w =11 and w = P . 

of multiplications is in the order of n.Cnl + n2 ) + n. 


2.6.2 Rader prime algorithm : 

The Rader prime algorithm [4] can be used to 
compute the Fourier transform in any field F for a prime length. 
For a prime length p, we can construct a field GFCp) to reindex 
the vector components. By this algorithm n point Fourier transform 
can be converted into (n -1) points cyclic convolution. Let n be 
the primitive element in GF(p). Then each integer less than p can 
be expressed as a unique power of n. 
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Now, the discrete Fourier transform is: 

k=0, 1, 

This can be written as. 


„ ik 
= E w V£ 


.P-1 


n-1 

Vo = E Vi 
i=0 


ik 

and Vjj = vq + E w Vi 

i = l 


k = l,2,....,n-l 


For each i, let r(i) be the unique integer from 1 to (n-1) such 

IT C i ) 

that in GFCp), ir = i. The function r(i) is a map from the set 


{ 1,2 n-1 } onto the set { 1, 2, 

write Vj^ as. 


,n-l }. Then we can 


V 


r(k) = VQ + E w 


n-1 r(i)+r(k) 

IT 


^ r(i) 
n 


TT i = l 

Because r(i) is a permutation, we can put L = rCk), j = n -l-r(i) 


n-1 ^L-j 

Vl=Vo+E w V ^_i_j 
IT j=0 V 


This can be written as 

( 1 ) 


n-2 ^L-j (1) 
Vl = VQ + E w Vj 

J=0 


( 2 . 2 ) 


( 1 ) ( 1 ) 

where V l = Vl and vj = v n-l-j scrambled input and 

TI IT 

output data sequences. From the equation (2.2), we see that the n 
point Fourier transform is converted into (n-1) point cyclic 
convolution. Ue can realise FFT by combining Rader prime algorithm 
and Uinograd convolution algorithm- 
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CHAPTER 3 

THEORY OF POLYNOMIAL REPRESENTATION 

3 . 1 Introduction : 

Representation of 'n’ functions of 'm' variables on 
GFC2) can be done by one polynomial of one variable on the 
extended Galois field GF(2*^). Ue shall discuss the theory of this 
polynomial representation in the following section. 

3.1.1 Representation of simple 1-D mapping : 

Let us first consider the simple case of a truth 

table for which m = n, where m is the number of input variables 

and n is the number of output variables. Then x = (Xq x^ X 2 

X ^ 1 and y = (y^ 7^ 7^ - V ^ represented as elements 

n~l Q 1 2 n-1 

of GF(2*^), where GF(2*^) is the extended Galois field over GFC2). 
The polynomial representation of such a simple truth table is: 

y = fCx). x,y € GFC2"). 

Theorem [11] associated with this polynomial representation is given 
below. 

Theorem: Any function f(x) on GF(2”) can be represented as a 

polynomial of order r = 2 ” -1; i.e., 

f(x) = a^j + Sj^x + • • • ■ ^ GF(2”). 

The coefficients a^^ C 0 i i s r) are determined by 
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^0 

a. = E x^“^£(x), 1 i i S r, x€GF(2*') 

x€GFC2") 

Proof of this theorem is given in Appendix A. 


3.1.2 Representation of 1-D general 


In general m is not necessarily equal to n. In 
this case the theorem for its polynomial representation is given 
below: 

Theorem: Any function fCx) can be represented as a polynomial 

fCx) = &Q + aj^x + a.^x^ + + a^x*^ (3.2) 

r = 2® -1, X € GFC2®), fCx) € GF(2”), a^ € GF(2^) (0 S i S r) 

where coefficients a^ (i = 0,..,r) are determined by 

a^ = f(0), 

(3.3) 

a^. = E x’^“^f(x), 1 i i ^ r. 

x€GF(2®) 

And L is the l.c.m of m and n. 

For the general mapping x € GF(2®) and y € GF(2*'). 

The set of all such mappings has the structure of a vector space 

fit 

of dimension 2 . In this vector space we can choose 2 basis 
elements shown in the next page. 
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0 12 3 

X X X X 


2 “ -1 


0 0 0 


1111 
2 3 

1 0 3 3 

1 3 ^ 3 ^ 3 ^ 

1 3 ^ 3 *® 3 ^ 


, 2“- 2 


1 p 


2“-2 


Here, x 


X ; X € GFC2 ). The set of all such special 


functions { x 


2 ® -1 2 ® -2 
: X 


X } are linearly 


independent and constitute a basis of the vector space under 
consideration. Now y = f(x) can be written as 


2®-l 2®-2 

3 3 3 


+ a - X 
3 


In matrix notation , f = G a 


C3.4) 


where the matrix G can be written as 


1 0 0 0 0 

1 

1 

1 DFT matrix of 
1 

. order 2®-l 


..m ..m 

2 X 2 



The inner matrix of G is a Dft matrix of order (2**-!). 

The equation (3.4) gives the forward Galois transform of f. 

— 1 

Now we can also write, a = G f (3.5) 


where the inverse matrix of G is 


1 0 0 0 0 

1 

0 I DFT matrix 
0 

0 of order 
0 

0 2 ® -1 


0 


"“1 

The inner matrix of G is an IDFT matrix of order (2 -1). 
The equation (3.5) gives the reverse Galois transform of f 
this equation we can find out 'a’ coefficients as, 


a = f 
(3 3 


a 

P 


0 






m 

-2 ■ 


From 


3.5a) 


And other components of 'a’ coefficients can be determined by the 
corresponding IDFT components. Determining all those coefficients 
we can get the polynomial representation of switching functions. 



3.1.3 General theoreroa on Galois switching functions : 


For the realization of truth table in extended 
Galois field, we have so far discussed earlier the case where the 
ground field is GF(2). For general Galois field GF(q), where q is 
a prime number, the relevant theorems [11] are given below. 


3 . 1 . 3A Single variable polynomial representation : 


Any function f (x) on GFCq) can be represented by a 
polynomial of order r = q - 1 as 

f(x) = - aj^x - a 2 X^ - ~a^x^ (3.6) 

where a^ € GFCq), a^ = f(0) 

and a^ = E x*^ ■^f(x). (3.7) 

x€GF(q) 


3 . 1 . 3B m-variable polynomial representation : 

This is the generalized theorem of the above in the 
case of m-variable functions. 

Any m-variable function on GF(q) 

y = f(xl,x2,x3 ,xm) (xl ,x2 ,x3 , . . .xm, y€GF(q) ) 


can be represented by an m-variable polynomial as 


Z I r >,i2 im 

f (xl,x2, . - . ,xm) = E E ... Ea . ^^^^xl x2 . .xm 

il=0 i2=0 im=0 


. . .(3.8) 



where 


( r = q - 1 . 


*■00 0 ~ 


& 0 0 ~ 3 C £(x, 0 ,..., 0 ), 

X 


Oi . . . . 0 


•E x’^'^fCO^x, 


,0), 


00 i 


-E x‘^"-^f(0,0, 

K 


• y X D f 


jO 


= C-1)^ E E jf Cx,y,0, 

X y 


^iOjO...O " ^ ^ x*'"^y’^‘^£Cx,0.y,0, 

’ X y 


*oo...oij = ** x'-^y'^'JfCO.o I 

X y 


.itt 


r-il ^r-i 2 r-im, 


1112 . ..i«. =<-^> xf ^ 2 -- In."' •••"“ “"^Cxl,x 2 


1 S 11,12,13 in. i V . 

where In E , E E x,y ... run all over GFCq). 

X X y 


3.1.4 Frobenlua cycles In switching lunctlona ; 


(3.9) 

0 ) 

. , 0 ) 

,x,y) 

. . ,xni) 


The polynomial y 


£Cx) over Finite Field as 



discussed earlier has nice properties connected with Frobenius 
cycles [11]. This is based on the following theorem about finite 
fields. 

Theorem: Let P = GFCq^) be an extension field of K = GF(q) where q 
is a prime power. Any 0 € P is in K if and only if 

0*^ = 0. 

In general when a finite field P has a subfield K P)» the 

transformation 0 0*^ for any 0 € P is called 'K-Frobenius 

transformation. ’ 

From the above theorem, 0 € P is invariant by 

2 i-1 

'K-Frobenius transformation’ iff 0 € K. {0, 0*^, 0^,... ,0*^ } 

1 j 

is called a K-Frobenius cycle if 0*^ = 0 and 0*^ 5^0 for j < i. 

Sum of all elements of a K-Frobenius cycle is known as 

2 i-1 

'trace' of 0, i.e, tr(0) = 0 + 0*^ + 0*^ + ....+ 0^. 

Another important theorem based on the polynomial 
representation is given below. 

Theorem: Let GFC2*^) = GFCq) = K, then coefficients a^, a^^, • - 

in (3.7) satisfy the following condition 



j = iq Cmod(2“-l)). 

By this theorem we can say that if a^x'^ is a term in (3.2), then 
its GF(q)-Frobenius transform can also be found in (3.2) 
Cq=2*^). As a result terms in (3.2) can be decomposed into several 
GF(q)-Frobenius cycles and each of the trace functions can be 
processed in parallel to get higher throughput. 
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CHAPTER 4 

SOFTWARE DEVELOPMENT 

In this chapter we discuss in detail the software 
implementation to determine the polynomial coefficients of Galois 
switching functions. 


4 . 1 Specification ; 

Let us first establish the specifications of the 

problem implemented in this software. 

Our problem is to obtain polynomial representation 

of a given truth table of 'm' input and 'n’ output variables in an 

extended Galois field. We restrict the maximum field size to 
15 

GFC2 ). The range of values of 'm’ and 'n’ becomes 2 i m,n ^15. 
User is asked to enter the values of 'm’ and 'n' . Then the entries 
of X and Y of the truth table will be entered by the user from 
keyboard. After each entry of X and Y, the user has the option to 
enter the next entry or to quit the entry so that rest of the 
entries for Y are taken as don’t care. After realization of the 
polynomial representation of the given truth table, the computed 
'a coefficients' will be displayed on the screen. The 
representation can be checked by entering X and the corresponding 
Y will be computed with those 'a coefficients’. This computed Y is 
the same as in the truth table. 



4 . 2 Prograinininjg language: 


The main aim of the software realization is to 
minimize the computational time. This will essentially depend on 
the implementation of efficient algorithms. In addition to the 
algorithms, computational time will depend on the programming 
language used. The software has been developed in 8086 assembly 
language. Using this assembly language rather than any high level 
language, the computational time has been reduced a lot. As for 
example, the realization of truth table for m=8 and n=8 by 

Fortran IV programme takes time for computation of 'a 

coefficients’ as one and half minute. The corresponding time using 
the assembly language is 2.5 seconds. 

4 . 3 Development and implementation of various algorithms : 

Let us discuss various algorithms in detail 
which have been implemented in the software. 

Ic 

4.3.1 Algorithm for generation of field elements of 2 ) : 

Let a be a primitive element of the extended Galois 
field GF(2^) with a primitive polynomial over GFC2). Any field 
element can be represented as a power of the primitive element. 
This representation is known as 'Polar form’. Another 
representation is known as 'Cartesian form’ in which any field 
element can be represented as a polynomial of a of degree C^-l) 



w-ith the coefficients from GFC2), that is 


a-* = zC0) + 2 Cl) .a+zC2) .a^+ +zCk-l) \ 

where z(i) € GF(2), 0 S j i 2^-2 and 0 S i S (k-l). Coefficients 

2(0), z(l),zC2), zCk-1) represent in cartesian form. The 

flow chart for the implemented algorithm to generate the field 

k 

elements of GFC2 ) in cartesian and polar form is shown in 

Fig. 4.1. 'Primitive poly.’ is the primitive polynomial of degree 

(k-l) with the kth bit as zero, Cartesian form is in k bit 
register with the corresponding polar form in the 'count'. Thus 
all the cartesian forms are stored in 'Pol_buff’ corresponding to 
the address index in polar form. Except the elements 0 and 1 all 
other field elements are generated by this algorithm. Exponents of 
field elements 0 and 1 in Polar form are represented as -1 and 0 
respectively. 


4.3.2 Computations in Galois field: 

To increase the speed of operation, the 
computations in Galois field should be as efficient as possible. 
This efficiency results from the compromise of speed and memory 
used. The optimized compromise will fetch the best result. 

For implementing any algorithm over Galois fields, 
we need the efficient arithmetic operations over Galois field. Let 
us consider the two arithmetic operations , i . e., multiplication and 



2 
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COUNT 

COUNT 

<EEGISTER> 


COUNT + 1, 
POLAR FORM. 
CARTESIAN FORM. 


IS COUNT 
l^K - 2 ^ 


4.1 : GENERATION OF FIELD ELEMENTS OF GF(2 ) 
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addition over GFC2”). If the elements in the field are represented 

in polar form, the multiplication of two elements will be just the 

addition of the powers of primitive element with modulo operation 

over (2*^ ~1)- For addition of two field elements available in 

polar form, the direct method is to convert the two elements from 

polar to cartesian followed by the bit by bit EXOR of those two 

k-tuples (cartesian form) giving the result in cartesian form 

only. To get the sum in polar form again we need the conversion 

from cartesian to polar. Thus the conversion of cartesian to polar 

and vice versa are often needed. Polar to cartesian conversion can 

be done efficiently by storing cartesian form of the field 

elements corresponding to the address index in the polar form in a 

buffer 'Pol_buff’. This needs total of 2*^ words for storage. But 

the conversion of cartesian to polar form becomes difficult. For a 

smaller value of n say upto n-10 this conversion can be achieved 

just by brute force comparison method. For large values of n, 

this will result in poor computational speed. For example, for 

15 

n=15 the brute force search technique may take 2 =32,768 

comparisons in the worst case. Another straight forward method to 
reduce this time is to construct a buffer of 2*^ words which will 
store the polar form corresponding to the address index in the 
cartesian form. Though the speed will improve, the memory 
requirement will be doubled. To implement the optimized algorithm 
those conversions should be avoided. Ue shall do all the 
arithmetic operations in polar form only. By this form, the 
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multiplication becomes simpler. For addition of two field elements 
in polar form, it is suitable to use the following relation [11], 

8^ + 0^ = 1 (4.1) 

Storing these relations we can add two field 
elements directly in polar form. Ue need not store all the 
relations, but only the relations for each of the first element 
of conjugacy classes. The amount of memory needed, in general is 
of the order of 2*^/n. But with the storing of only the first 
element of each conjugacy class, for any i determination of k 
becomes complicated, though memory requirement is considerably 
reduced. Hence for n > 16 we can go through this complication, as 
the storage needed is considerably large for higher n. For our 
problem, since n lies between 2 and 15, we need not go for such 
complexity. Using 2 words storage only for the relations given 
by (4.1), the addition can be done efficiently in the polar form. 
Thus storing only the first half of the relations, we can find the 
value of k for any i with a simple logic. The corresponding 
flowchart is given in Fig. 4.2. To store initially half of the 
relations we can construct two arrays, one containing polar form 
with the address index in cartesian and the other containing 
cartesian form with the address index in polar form. Then after 
storing the first half of the relations we do not need the two 
arrays at all. Now we can do the field addition of any two 
elements 0* and 0^ in polar form. Flowchart for this field 



START 



Fie- 4.2 


GENERATION OF 'K’ FROM 'I’ BY STORING 
HALF OF THE RELATIONS 1 + 0*1= 0‘K 







addition is shown in Fig. 4.3. Result of this addition is also in 
in polar form. In future all the computations will be done in 
polar form only. 

4.3.3 Zero padding ; 

Ue have already stated in Chapter 3 that the 

coefficients 'a' are the elements of GFCz'^) where L is the l.c.m 

of m and n. Thus some restrictions on m and n should be Imposed 

15 

because of maximum field size as GFC2 ). As for example, in the 

case of m=3 and n=7 , value of L =21. To get a wider range of 

values of m and n, it has been proposed to do the zero padding to 

Y. By this padding concept we raise the value of n-tuple of Y to 

the nearest multiple value of m-tuple of X. For the above example, 

we can do two zero paddings to n-tuples of Y. Uith this padding 

9 21 

field size of ‘a’ coefficients becomes GF(2 ) instead of GF(2 ). 
Flow chart of this zero padding is given in Fig. 4.4. Even 
introducing the zero padding to Y, we can not take all the 
combinations of m and n. As for example, in the case of m=6 and 
n=13 we can not pad to Y further. Thus for each value of m entered 
by the user, the maximum value of n possible is displayed on the 
screen. For the above example, the maximum possible value of n=12 
for m=6. After the padding we need to store the relations given by 
(4.1) for the field GFC2*^). 




Fig. 4.3 : ADDITION OF Q'X AND ©‘Y IN POLAR FORM 












Fifi. 4.4 : ZERO PADDING 
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^ 3 ^ Conversion of cartesian to polar form : 

The data entry for X and Y by the user is in 
cartesian form only. For computations we need once to convert the 
cartesian to polar form. The flow chart for implementation of 
cartesian' to polar form conversion of Y is given in Fig. 4.5. 
Converting the m-tuple of X into polar form say i.e. 'i', the 
corresponding Y in polar form is stored in a buffer at the 
location j = 2i to arrange Y (polar form). The user has the option 
to enter all the X-Y data or quit the entry. In case of 'quit’ 
command, rest of the entries of Y may be taken as don’t care. For 
computation time minimization the don't care entries are taken as 
all zero. 


4.3.5 FFT computation over f inite field : 

To compute the 'a’ coefficients, DFT of 2 -1 data 
points is taken. In the software FFT of length 2*®-l has been 
implemented over appropriate finite fields. The implementation is 
baaed on Cooley-Tukey algorithm. Depending on 'm’ the FFT is taken 
over a length N= 2®-l data. The input data is Y (polar form). By 
Cooley-Tukey algorithm, we break N into K prime factors which are 
stored in a look up table. For prime length n, the n point Fourier 
transform problem is converted into n-1 point cyclic convolution 
using Rader prime algorithm. After the FFT realization, the 'a’ 
coefficients are generated according to Equation (3.5a) and 
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stored in the order of a * , a a . a ,® - 

as discussed in Chapter 3. 

In Chapter 5, we have presented the hardware 
implementation of polynomial evaluation over finite field. For 
this purpose, the 'a' coefficients are arranged in the order of 


m ffl 



and stored in an output file ’’Coef.Dat” in cartesian form. From 
this output file, data are transferred to a EPROM for further use 
in hardware. 


4.3.6 Polynomial evaluation to check the proper r epr es ent at i on ; 

To check the polynomial representation user is 
asked to enter any X. Uith the computed 'a’ coefficients and X the 
polynomial is evaluated directly as given by Equation (3.2). The 
computed Y is in polar form. Conversion of polar to cartesian 
results the n-tuple of Y which is the same as entered by the 
user. Flowchart of polar to cartesian conversion is shown 
in Fig. 4.6. In this, the polar form is loaded in 'Count' and 


'A' is an n bit shift register. 
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* ■ ^ Realization of mapping for substitution network : 

As an application of this polynomial 
representation, a mapping for substitution network has been 
realized. By this, we realize first the permutation of N objects 
and then this mapping of the original sequence to the permuted 
sequence is represented by a polynomial representation. Given a 
sequence of N objects there are N! possible permutations. Uith 
permutation number we can specify the permuted sequence. There is 
an unique mapping between the sequence and its permuted version 
for each permutation number. Permutation number '0000' means the 
permuted version sequence is the sequence itself. By the 

polynomial representation, permutation of N (2-8) objects have 
been realized. User has given the option either to enter the 
permutation table directly or permutation number. The maximum 
permutation number for N is N!-l and is displayed on the screen to 
help the user to enter a valid permutation number. 

The essential idea of generating permutation of N 
objects according to a permutation number is based on mixed radix 
representation known as 'Factorial number system’ [7]. In this 
system any integer number i : 0 S i ^ N!— 1 can be uniquely 
represented as 

i = Jh-1 * * ^N-2 * 

where 0 ^ -^N-l ^ ® ^ -^N-Z ^ ^-2, .... , 0 ^ -^1 ^ 

By a notation, it can be represented as: i = < jjj_j^ jjj _2 
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Using this representation we can generate the unique permutation 
o£ N objects i.e. { 1,2,3,...N} depending on 'Permutation number'. 
The flow chart of the permutation generation is given in Fig. 4.7. 
The mapping of the sequence and its permuted version is then 
realized by polynomial representation and the corresponding 'a' 
coefficients are displayed on the screen. Illustrative examples 
are shown in Fig. 4.8, Fig. 4.9, Fig. 4.10 and Fig. 4.11. 


4 . 5 2-D Galois transformation : 

From Equations (3.8) and (3.9), for m=2 we can 
represent a 2-variable function by a polynomial 


r r 


il «i2 

y = £(xl,x2) = E E x2 

il=0 i2=0 


(4.2) 


n. 


( xl, x2, y € GF(2“)) 


where 


-00 = 


a^^p = E x’^"^f(x,0) 
x€GF(2“) 


= E x^ ^f(0,x) 


1 i i ^ r 


and -ili2 ~ ^ ^ f(xl,x2). 


(4.3) 


We can develop the following algorithm from the above Equations 
(4.3) to compute * 

Algorithm '2-D Galois transformation’ 
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Fifi. 4-7 : PERMUTATION GENERATION FROM PERMUTATION 
NUMBER 









PERMUTATION TABLE 

No. OF ELEMENTS* 07 



PERMUTATION No.* 0000 

X 

Y 


01 

01 


02 

02 


03 

03 

N.B: Y IS THE PERMUTED VERSION OF X 

04 

04 


05 

05 


06 

06 


07 

07 



Fi,. 4.8 = PERBUTATION TABLE (H-7 . PERMUTATION No. =0000) 
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PERMUTATION TABLE 


No. OF ELEMENTS= 08 


Y 

PLEASE ENTER Y AT THE BRIGHT STAR POSITION 

5 

7 

2 N.B: Y IS THE PERMUTED VERSION OF X 
1 

3 

4 

6 

8 


Fig. 4.10 ; PERMUTATION TABLE FOR N=8 (DIRECT ENTRY) 



VALUE OF ”a” COEFFICIENTS IN POLAR FORM 
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gin { 2-D Galois transformation } 

Set the value of N(5-7). 

Read data from 'Data file’ to 'Full_bu£f’ of size 2^**. 

N 

Store 1st 2 consecutive data bytes in 'Cart_buff’. 

. Initialize Row__cnt = 1. 
apeat : 

. Compute 1-D Galois transform of the 2** data in 'Cart_buf£’. 

. Store back the transformed data to 'Full_buf£’ in the locations 

Kactly as read earlier, 

. Row_cnt = Row_cnt + 1 . 

N 

. Get next 2 block of successive data from 'Full_bu£f’ to 
Cart_buf £ ' . 

N 

ntil Row_cnt = 2 - 

. Initialize ' STRT_ADDRESS ’ = 0 and 'COL^NO' = 1. 
lepeat : 

N 

.0. Scramble 2 data from 'Full_bu£f’ as the starting location 

STRT_ADDRESS’ with offset of 2®^ and store in 'Cart_buf£’. 

N 

LI. Compute 1-D Galois transformation of the 2 data in 
'Cart__buf £ ’ . 

12. Store back the transformed data to 'Full_bu£f’ exactly in the 
locations as scrambled earlier. 

13. 'COL-NO' « 'C0L_N0’ +1. 

N 

14. ‘STRT_ADDRESS’ * 'Strt_ADDRESS’ + 2 . 

Until 'COL NO’ = 2®*. 
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. Open an output file 'Inge.Daf to atone 2 “ tnanaforme<J data. 

. End { 2-D Galoia transformation ). 

For software implementation, input data of size 2^^ 
'e taken from picture file of size 2^ x 2^. The transformed data 
"e stored in an output file 'Imge.Dat'. To check the proper 
>lynomial representation as given by (4.2), we have computed the 
>rward Galois transform of input data followed by inverse Galois 
ranaform. After these transformations output file contains the 
^iginal input data to ensure the proper polynomial representation 
f 2-D function. 

2N 

Advantage of such 2-D Galois transformation of 2 

ata over 1-D transformation is that for 2-D case we need all the 

N 2N 

offlputations over GF(2 ). But for 1-D transformation of 2 data 

2N 

e need computations over GF(2 ), 

.6: Illustrative Examples ; 

For an arbitrarily chosen truth table, in the case 
► f m = n = 5, the computed 'a' coefficients and the entered truth 
:able are shown in Fig. 4.12 and Fig. 4.13 respectively. To show 
sero padding another truth table example has chosen with m = 4 
md n « 5 with ten entries of X-Y. By three zero paddings to 
the n-tuple of Y we get the field size of 'a' coefficients as 
;FC2®). Fig. 4.14 and Fig. 4.15 illustrate the example. For 
•ubutltution nappln* realisation , v. have given the example 
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N = 7 with the permutation number as '0000’. Fig. 4.8 and 
.9 are the permutation table and corresponding 'a' 
coefficients respectively. Another example is shown by Fig. 4.10 
and Fig. 4.11 for N = 8 with the direct permutation table entry by 
the user. 

The following table lists computation time of 'a’ 
coefficients for some combinations of m and n. 


for 

Fig. 


m 

n 

No . of 

8 

8 

10 

9 

9 

10 

12 

12 

10 

14 

14 

10 

15 

15 

10 


entries Computation time 

2 secs 

3.5 secs 
8 secs 
3 mins 

5 . 5 mins 


For 2-D Galois switching function realization we 
have chosen a picture file 'Lincoln' of size 64 x 64 for forward 
as well as inverse galois transform. Forward transform followed by 
the inverse transform give back the original picture. 



CHAPTER 5 


HARDUARE IMPLEMENTATION OF POLYNOMIAL EVALUATION 


5 - 1 Introduction : 


This Chapter includes details of hardware 
apleiaentation. In Chapter 3 we have discussed the theory of 
>lynoraial representation of a system of Boolean functions. From 
luation (3.2), knowing the 'a’ coefficients the value of Y can be 
>mputed corresponding to a given value of X. Using Horner's rule [6] 
evaluating a polynomial expression we can reduce the number of 
Itiplications involved by (r-1) where r is the degree of polynomial. 

' this rule the polynomial expression becomes : 

y = £(x)= (...(( a^^x + a^_j^)x + a^_ 2 )x+...)x + a^) . 
sic functional schematic diagram for the realization of Horner’s 
le is shown in Fig. 5. 2. Let us discuss the hardware implementation 
the following section. 


2 Specification : 

N 

The hardware has been developed for X,Y € GF(2 ) 
th N = (2-8). For a given mapping of X and Y, the 'a' coefficients 
e loaded in a EPROM (IC 2716) from the output file ”Coef.dat” 
eated by software. From the front panel N-tuple of X can be 
tered. For each N (2-8) the primitive polynomial with its N th bit 
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as zero is also entered along with the entry of 4 digit bina 
representation of N. A start switch provided in the front pan 
initiates the computation and finally the computed output Y is latch? 
to LEDs for display. 

^ ^ Hardware implementation based on Horner ' s rule : 

Basic block diagram is shown in Fig. 5.1. From t 

front panel input X, number of variables N (2-8) and the primitiv 

N 

polynomial of GF(2 ) are selected. The control circuit block as show 
basically generates all the control signals needed for Modulel an 
Ilodule2. Hodulel and IIodule2 together realize the entire circuit fo; 
Horner's rule implementation. 

5.3.1 Front panel : 

The circuit diagram for the front panel has beer, 
shown in Fig. 5.6. Switch 'Sw' has been provided for starting tl 
polynomial evaluation. This start information activates the control 
circuit to generate all the necessary timing signals. Fig. 5.7 depict 
the corresponding timing diagram for N=3. 'SU-X' is used for selecting 
input X. The input data ( Xq X^ X^ . - - . ) are used by Modulel J 

'SU-P' is to select the primitive polynomial (with N th bit as zero) 
for GF(2^). In Appendix B the primitive polynomial [5] for each N hasj 
been listed. 'SU-N' is a 4 bit switch to enter the number of variables! 
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Fig. 5.7 : TIMING DIAGRAM (N=3) 
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N (2-8) as 4 diftit binary number. Finally the red LEDs ( LDO - LD7 
in the front panel display the computed Y output. 


5 . 3^ Control Circuit ; 

The circuit diagram is given in Fig. 5.3. Uitl 
power on, a reset pulse is generated by R1 , Cl, D1 and U1 which resets 
U4, U9, U13, Ull and U14. As a result, the fundamental clock generated 
by R4 , R5, C3, U2 and the crystal (4 MHz) is not allowed to pasi 
through U5 . Uhen the start switch is activated from the front panel ^ 
the output of the flip-flop ( U4/Pin 11) becomes high and enables th« 
clock to counter U5. From a 4 digit number N (2-8), U7 and U8 realize 
(2N - 1), which is necessary for the following purpose. 

N 

For multiplication of two field elements € GF(2 ) 
each N-tuple representation [5] of field element can be expressed as a 
polynomial of degree (N-1) with the coefficients from GF(2). Hence 
after multiplication of two such field elements can be expressed as a 
polynomial of degree (2N - 2). The polynomial has a total of (2N -1); 
coefficients including the constant term. Uith modulo operation of 
this result over a primitive polynomial of degree (N-1) we get thei 
result of multiplication of two field elements as an N-tuple field 

■i 

element. For such multiplication we need (2N - 1) clocks. For this 
reason only we need to generate (2N - 1) from N. The multiplication is 

realized by Modulel and Module2 together. 

U5, U6, U9 and UlO divide the input clock by 
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FIG. 5-3 CONTROL CIRCUIT DIAGRAM 

Component list : £// - 74 -/. 5 /3< uz-74S oo j u3, u^, uio, uiz, uie - ?4-z$oo} 

U8- 7^1686; O^, U9, U11, U}5-74-LS}^4-; U5, U73,UtZ>--7^lS95s 
U6, UI6, Uf7-?4-ZS85} U/9, UZO-^4-JZf} UZI-JZ^IS. 

All resistor are Ifi aAms and capacitors In farad, unless specified. 






'(2N - 1)’ to generate the signal 'LOAD COEF’. This is delayed by on< 
clock period to generate the signal ’DELAY' which is used as reac 
signal for the EPROM U2i. Counters U13 and U14 generate the 8 bit 
address for U21 starting from zero. At each rising edge of 'DELAY' th« 
address counter advances by one to fetch the next 'a' coefficient. I 
flip-flop Ull is cleared at the rising edge of 'LOAD COEF’ and set at 
the rising edge of 'DELAY’ to generate the signal 'GATE'. Fundamental 
clock is ANDed with 'GATE' to generate ' CLK SR2/SR3’ to be used b^^ 
Modulel and Module2 for multiplication purpose. The complement of this 
signal is 'CLK SR4 ’ . 'RESET SR’ is generated by NAND operation of 
'LOAD COEF’ and 'CLK'. For latching the multiplication result 'LATCH 
CLKl’ is used. After fetching all the 2 “ 'a’ coefficients 'LATCH CLK2 
is generated to latch the final computed Y output and a monostablei 
multivibrator U19 is triggered at the rising edge of 'LATCH CLK2 ’ to 
reset U4 to end the computation. The system then becomes ready for the 
next start to begin polynomial computation. 


5.3.3 Modulel and Hodul e2 for Horner ’s Rule Realization : 

These two modules together realize Horner’s rule; 
implementation. Circuit diagrams for Modulel and Module2 are given in; 
Fig. 5.4 and Fig. 5.5 respectively. In Modulel U21 is a 3-8 line; 
decoder. Depending on Cl, C2, C3 the outputs of decoder are given in 


the following table. 




Fig. 5.4 : MODULEl CIRCUIT 

CX)MPONENTS LIST Ul,U22-74273; U2,U4,U6,U8-74LS08; 

U3,U7-74LS32; U5,U9-74LS86; 
U10,U11,U12,U13 -74LS74; U14,U16-UlS-7^i1 
U15,U19, U20-74LS04; U21-74LS138. I 

Rl-lKrw . * 


















TO THE LEDS OF FRONT PANEL 


FiG-5.S CIRCUIT DIAGRAM FOR MODULE-2 


Components list : UJ, UfA-, Ui?-?4Rj' 3} UJZ, U/S, Uf5, W6-T.LLB86 L 05, US, 08 , UIOf O/8, 
UW-T^lSOSi i/4,U8jU?, 09, UHjU 1^-74 ISOO. 
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5 

0 
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0 
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1 
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6 
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Tine cda.ta (K2 K3 K4 K5 K6 K7 K8) are introduced to realize th< 
generalized finite field multiplier over GFC2^). For our problem 1 
ia Itn the range of (2-S). In the control circuit these data are used 
to coopare the address count to 2** to generate the signal 'LATCH CLK2 * 
for fdiaal latching of the computed output. In Modulel U22 latches the 
'a.' coefficients at the rising edge of 'LOAD COEF' . UlO, Ull, U12 an<J 
UlS/Modtilel are the 'temporary buffer’ (as in Fig. 5.2) which are 
traraspajrent at the high level of 'LOAD COEF*. U14/Module2 is the 
'MuLtaplier latch' (as in Fig. 5.2) which is cleared at each starting 


of tine computation 

by the signal 

' LATCH RESET ’ . 

Bit by bit 

EXOR 

this 

mu Itipl led 

result 

and the 'a' 

coefficients 

is done 

by 

U15, 

Ul 6y^Hodtjle2 . 

The EXOR output data 

(biO, bil, bi2 

, bi3, bi4, 

bi5. 

bi6 , 


bi 7> are transparently latched by 'temporary buffer' fob 
multiplication with X. Ul, U2, U3, U4, U5, U6, U7 , U8 and U9 of 
ModuLlesl realize the multiplication of (biO, bil, bi2, bi3, bi4, bi5 
hii, bi7) and (XO, XI, X2, X3, X4, X5 , X6 . X7). With C2N - 1) clocks 
the C2N - 1) terms of the multiplication are transmitted serially in| 
the »:equence of MSB first and LSB last. This multiplier has been 

IVT 

desi graeci in generalized GF(2 ) with MSB as the 1st term in the serial 
output:. With this MSB as the let term in the sequence the moduloi 



operation over this multiplied result is done in parallel with thi 
multiplication operation. For multiplication each term of the resuli 
is generated at the rising edge of 'CLK SR2 ' . For the modulo operatiot 
clock for the shift register Ul/Module2 is just the complement ol 
CLK SR2 . After the elapse of C2N - 1) clocks the multiplication ia 
over and the result is latched at the rising edge of 'LOAD COEF'. Let 
us explain the field multiplication by the circuit with an example. 


3 

Example 5.1A : Suppose N=3. Primitive polynomial for GFC2 ) is taken 

3 3 

as X + X + 1. Let the field elements of GF(2 ) for multiplication be 

IIO 2 and IOI 2 . For N=3, the equivalent circuit schematic diagram is 

shown in Fig. 5.8. For N=3 the number of clocks needed fd 

multiplication = 2N -1 = 2.3 -1 =5. The following table will explain 

clearly the circuit operation for multiplication. 


Input Clk SR2 Q2 Q1 QO x.b I CLK SR4 Q2^ QO^ 

b or ) (X) 

No clock 0 0 0 0 No clock 0 0 0 

1 jr 1001 jr 001 

1 X 1101 J" oil 

0 X 0111 X 111 

0 X 0 0 11 X 10 0 

0 X 0000 X oil 




compute a polynomial of degree r 


are 




Fifi. 5.8 : EQUIVALENT SCHEMATIC DIAGRAM FOR EXAMPLE-5. lA 






5.3.4 Concluaion: 


Recently Hasaey and Oinura [12] developed a neu 
multiplication algorithm for Galois fields based on normal basis 
representation. This is a very efficient multiplier and can be used 
effectively for a fixed Galois field GF(2**). Our approach is to 
develop a multiplier over GF(2*^) with generalized N and the 
representation is based on standard basis. By Massey and Omura 
algorithm number of clocks for multiplication in GF(2®) = (m + 1). Our 
hardware implementation takes = (2m - 1) clocks for multiplication. 



( 


transformations, the transformed data should be identical to the 
input data. 

Hardware implementation of polynomial evaluation 
N 

over Galois field GFC2 ) with the range of N as 2 to 8 is based on 
Horner’s rule. The multiplier design in standard basis is 
implemented in a modular structure so that it can be extended for 
higher N. VLSI implementation is possible by exploiting the 
modular structure. 

Future scope : 

For the computation of coefficients we have used 
Cooley-Tukey FFT algorithm. For prime lengths we have used the 
Rader prime algorithm to convert an n point discrete Fourier 
transform into an (n-1) point cyclic convolution. This convolution 
can be efficiently computed by using Uinograd’s convolution 
algorithm to improve the overall computation time. 

Properties of Frobenius-cycl es can be used to 
reduce the computation time for polynomial evaluation by a 
dedicated hardware. By the Frobenius transform theorem we have 
seen that if a^x^ is a term in the polynomial, then its 
Gf (q)-Frobenius transform a^x^'* can also be found in the 
polynomial. Thus the terms in the polynomial can be decomposed 
into several GFCq)-Frobenius cycles which can be computed in 
parallel to speed up the computation. 
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Appendix A 


Appendix A : Proof of the theorem for a 


The theorem states that any function fCx) on GFC2^) 
can be represented as a polynomial of order r = 2^ ~ 1; 


where , 


f(x) = a^ + ^1^ ^ + . . . 

€ GF(2^). 


Th.6 coefficients are determined by ; 

Sq = f(0) 

a. = E x’^'^fCx), 


1 i i S r . 


x€GFC2 ) 


Proof : 


Ue have, fCx) = + a^x + a^x^ + . . . +a^x‘^ . . . . (A . 1 ) 


Plultipling both sides by x ^ we get; 


f V- -v"" ^ “i + 1 ~i + 2 1 

fCx;.x - a^x + a^x + a^x + ....+ a. + . . . . +a^x 

Nov, x*^ = 1, X € GFC2‘^) and r = 2*^ - 1. 

f(x).x ^ = a^x^ + a,x*^ i"**! ^ ^ ^ ^ ax*^~^ 

u 1 i ' ' * ’ r 

Ue can write also; 

Z f(x).x ~®'n * ^1 Ex +....+ a. +...+ a Ex^ 

u 1 1 r 


x€GFC2 ) 


x€GFC2 ) x€GF(2 ) 


x€GF(2 ) 


Ue know for all x € GFC2*^), E x-^ = 0 

x€GFC2") 


Hence, E f(x).x^ ^ = a., 
x€GFC2*^) ^ 


1 i i Sr. 


No.w, put the value of x = 0 in Equation (A.l) 
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APPENDIX-B 


Appendix B: List of primitive polynomials f or GFC 2 ) 


Here, ve have listed primitive polynomials f< 


GF(2^) for 


2 S k S 15. 


k 


Primitive polynomial 


Hex represent at ion 
(k th bit = 0) 


2 

Cl 

X 


+ X + 1 

3 

3 

3 

X 

+ 

X + 1 

3 

4 

4 

X 

+ 

X + 1 

3 

5 

5 

X 

+ 

x^ +1 

5 

6 

6 

X 

+ 

X + 1 

3 

7 

7 

X 

+ 

x^ + 1 

9 

8 

8 

X 

+ 

x^ + x^ + x^ + 1 

Id 

9 

9 

X 

-f 

x^ + 1 

11 

10 

10 

X 


x^ . 1 

9 

11 

11 

X 

+ 

x^ + 1 

5 

12 

12 

X 

+ 

X^ + X^ + X + 1 

• 53 

13 

13 

X 

+ 

X^ + + X + 1 

lb 

14 

14 

X 

+ 

X ^ ^ + X ^ + X + 1 

443 

15 

15 

X 

„ + 

X^^ + X^ + X + 1 

100b 
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